CVE-2001-1008

The CVE-2001-1008 entry concerns Java Plugin 1.4 for JRE 1.3, where signed applets can run even if the code-signing certificate is expired. This indicates a vulnerability in how the plugin handles expired certificates, allowing remote attackers to attempt unauthorized activity via an applet signe...

CVE-2001-1359

CVE-2001-1359 affects Volution clients 1.0.7 and earlier. When LDAP authentication fails, these clients contact the CCD, enabling remote attackers operating a Trojan horse Volution server to fully control the client. No explicit exploit details or patch information are provided in the supplied do...

CVE-2001-1251

The CVE-2001-1251 entry concerns SmallHTTP (versions 1.204 through 3.00 beta 8). The vulnerability allows remote attackers to cause a denial of service by sending multiple long URL requests, potentially affecting availability. Documentation in the connected records confirms the affected software ...

CVE-2001-1380

OpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the /.ssh/authorizedkeys2 file, may not properly handle the "from" option associated with a key, which could allow remote attackers to login from unauthorized IP addresses...

CVE-2001-1370

CVE-2001-1370 affects PHPLib before 7.2d when register_globals is on, allowing remote code execution by sending an HTTP request that overwrites $_PHPLIB[libdir] to load code from another server. The issue is observed in Horde 1.2.5 and earlier, and in IMP before 2.2.6. Debian’s DSA-073-1 referenc...

CVE-2001-0978

login in HP-UX 10.26 does not record failed login attempts in /var/adm/btmp, which could allow attackers to conduct brute force password guessing attacks without being detected or observed using the lastb program...

CVE-2001-1349

Sendmail before 8.11.4, and 8.12.0 before 8.12.0.Beta10, allows local users to cause a denial of service and possibly corrupt the heap and gain privileges via race conditions in signal handlers...

CVE-2001-1385

The CVE-2001-1385 issue concerns the Apache module for PHP 4.0.0–4.0.4. When a virtual host is configured with engine = off, PHP can be disabled for other virtual hosts, causing Apache to serve PHP source code instead of executing it. This is a disclosure vulnerability affecting PHP/Apache deploy...

CVE-2001-1407

Bugzilla before 2.14 is vulnerable: users can bypass group security by marking a bug as a duplicate of a restricted bug, which adds the user to the restricted bug’s CC list and lets them view it. Affected: Bugzilla ≤ 2.13 (pre-2.14). Root cause: bypass of group security checks via duplicate marki...

CVE-2001-1380

Technical details for CVE-2001-1380 are not publicly available in the provided documents. No affected products, versions, or remediation are specified here. Please monitor for updates from authoritative sources.

CVE-2001-1296

Technical details about CVE-2001-1296 are not publicly available in the provided documents. Monitor for updates.

CVE-2001-0921

Technical details about CVE-2001-0921 are not publicly provided in the connected documents. The initial description describes a memory-sensitive form-field exposure in Netscape 4.79 on macOS; monitor for updates.

CVE-2001-0891

CVE-2001-0891 describes a format string vulnerability in the NQS daemon (nqsdaemon) of NQE 3.3.0.16 on CRAY UNICOS and SGI IRIX. A local user could gain root privileges by submitting a batch job with a name containing formatting characters (via qsub). The connected documents confirm the vulnerabi...

CVE-2001-1291

The CVE-2001-1291 entry concerns the telnet server on 3Com PS40 SuperStack II hardware that does not delay or disconnect after incorrect username/password attempts, enabling easier brute‑force access. Connected PT-2001-2418 notes affected versions are not specified, and there is no documented fix...

CVE-2001-0960

ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 store the backup agent username and password in cleartext in the aremote.dmp file on the ARCSERVE$ hidden share. The Nessus plugin item ARCSERVE_HIDDEN_SHARE.NASL confirms the ARCSERVE$ share is accessible and that multiple ARCserve versions retain ...

CVE-2001-1059

VMware creates a temporary file vmware-log.USERNAME with insecure permissions, enabling local users to read or modify license information. This CVE (CVE-2001-1059) is rated Low (CVSSv2 base 3.6) with local attack vector and no remote access. The connected documents reiterate the same issue but pr...

CVE-2001-1382

OpenSSH prior to 2.9.9p2 is affected by an echo simulation traffic analysis countermeasure that sends an extra echo packet after password/Carriage Return. This could let a remote attacker determine that the countermeasure is being used. Upgrade to OpenSSH 2.9.9p2 or later (as indicated by the CVE...

CVE-2001-1349

CVE-2001-1349 affects Sendmail before 8.11.4 and before 8.12.0.Beta10; the issue is described as local denial of service with possible heap corruption and privilege escalation due to race conditions in signal handlers. OpenVAS additionally notes a remote header buffer overflow for Sendmail 5.79–8...

CVE-2001-0873

uuxqt in Taylor UUCP package does not properly remove dangerous long options, which allows local users to gain privileges by calling uux and specifying an alternate configuration file with the --config option...

CVE-2001-0960

Computer Associates ARCserve for NT 6.61 SP2a and ARCserve 2000 7.0 stores the backup agent user name and password in cleartext in the aremote.dmp file in the ARCSERVE$ hidden share, which allows local and remote attackers to gain privileges...